Skip to content
View gh0sthacker's full-sized avatar
94 followers · 0 following
  • maxiw15

Achievements

Achievement: Pull SharkAchievement: YOLOAchievement: QuickdrawAchievement: Starstruck

Achievements

Achievement: Pull SharkAchievement: YOLOAchievement: QuickdrawAchievement: Starstruck

Highlights

  • Pro

Block or report gh0sthacker

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
gh0sthacker/README.md

gh0sthacker — Offensive security / vulnerability research; published CVSS scores: 9.8, 8.8, 7.6, 7.2

I find and responsibly disclose vulnerabilities in web applications. I build tooling to investigate captured application behaviour and evidence. I maintain graph-kb-assistant, a local-first graph over Caido HTTP captures.

4

published advisories

6

CVE requests filed

1

open-source project

graph-kb-assistant

Live GitHub stars for graph-kb-assistant

Local-first graph over Caido HTTP captures: Neo4j for relationships, SQLite for capture state, encrypted vault for raw exchanges, MCP so an agent can query it.

Go · MIT · early alpha

Vulnerability catalog

Published advisories (4)

found 2026-06-03 · NETAMS WNAM ≤ 1.6.4799
Published in FSTEC BDU · CVSS 3.1

BDU:2026-08966 · CWE-306 · CVSS 9.8
Unauthenticated admin access to the web UI.

BDU:2026-08967 · CWE-917 / CWE-94 · CVSS 7.2
Remote code execution through expression-language injection (authenticated).

BDU:2026-08968 · CWE-1004 / CWE-79 · CVSS 7.6
Session hijack and account takeover through a cookie without HttpOnly and XSS.

BDU:2026-08969 · CWE-352 · CVSS 8.8
State change as another user through cross-site request forgery.

CVE requests pending (6)

CVE requests submitted, IDs reserved, not yet public. No public CVE record yet; checked 2026-10-30.

  1. CAN-2026-2039690
  2. CAN-2026-2039708
  3. CAN-2026-2039709
  4. CAN-2026-2039710
  5. CAN-2026-2040557
  6. CAN-2026-2040558
Disclosure policy
  1. Report only through the project’s documented channel: /security, SECURITY.md, email, GHSA, a private portal, or VDP/VRP.
  2. If no private channel exists, or there is no reply for 30 days, a public issue may be opened without a PoC.
  3. After acknowledgment, send at most two follow-ups, spaced weeks apart.
  4. Allow up to 90 days for remediation, with an extension possible.
  5. Public or CNA disclosure follows the fix, or 30 days of silence after the last substantive response.
Out of scope
  1. DoS or volumetric testing without research value.
  2. Self-XSS.
  3. Clickjacking on non-sensitive pages.
  4. Issues requiring privileges the reporter already has.
  5. Missing security headers without demonstrable impact.
  6. Theoretical issues without a working PoC.

Achievements

GitHub achievements: Starstruck, Quickdraw, YOLO

Contact · ghosthacker.security@gmail.com · /security

Popular repositories Loading

  1. graph-kb-assistant graph-kb-assistant Public

    Local-first graph assistant for bug bounty research using Caido captures; early alpha.

    Go 72 8

  2. RDP_checker RDP_checker Public

    RDP service reachability / config checker

    Python 1

  3. graph-kb-assistant-oss graph-kb-assistant-oss Public

    Local-first assistant for exploring Caido HTTP history in a graph with a sourced knowledge base

    Go 1

  4. Scrabble Scrabble Public

    Forked from jesstess/Scrabble

    Scrabble library + CLI (Python packaging demo)

    Python

  5. maxiw15 maxiw15 Public archive

    Config files for my GitHub profile.

  6. stepic_language stepic_language Public archive

    Hello, this is my homework in stepic

    Python